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AMENDMENT AFTER FINAL 

Sir: 

Applicant provides the present response to address the issues raised in the Final 
Office Action mailed July 12, 2005 ("the Action"). 

If any extension of time for the accompanying response or submission is required, 
Applicant requests that this be considered a petition therefor. The Commissioner is hereby 
authorized to charge any additional fee, which may be required, or credit any refund, to 
Deposit Account No. 09-0461 . 



Figure 8 provides a flowchart depicting logic with which a provable chain of evidence 
be established for data represented in one or more data streams, accordmg to preferred 
embodiments of the pr^ent invention; and 



Figure 9 provides a flowchart depicting logjc wth which an audio stream may be 
transformed into notarized tect, according to preferred embodiments of the present nivention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The present invention improves the security of wireless pervasive devices. Central to the 
invention is a comprrfienave, top-down dedgn that focuses first and foremost on security throu^ 
a security core, as shown at elem«it 150 in Fig. 1. To this secure core, hardware and/or software 
support for one or more types of personal application fimctionafity can be selectively and 
dynamically added, resulting in a secure multi-fimction pervasive device. 

The preferred embodiments of the present invention use a multi-processor arcMtectufe m 

vAuch the master processor is a security core 1 50 which conq)rises a central proces^g unit 

(CPU) 152, a mwnory 1 54, and a protected area 156 for storing cryptogr^c keys. Preferably, a 

tecMque such as that defined in commonly-asagned U. S. Patmt feiHffit (serial number 

oq/ 

09/614,982) or U. S. Patent folW^ (serial number 09/614,983), which are entitled "Methods, 
SystCTis and Computer Program Products for Secure Firmware Updates" and "Methods, Systems 
and Computer Program Products for Rule Based Furaware Updates Utiliang Certificate 
Extenaons", respectively, is used for tightly controlling the code that executes in the security 
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remains attached to the security core. (AltOTiatively, an mqptenentation of the present invention 
may be configured such that this type of finnware revision reqmres an additional authentication 
process for the attached conq>onent) 

Fig. 2 dqricts logic that may be used to implement preferred embodiments of the 
componoit authentication process of the present invention. This logic is exeaited \^en an 
application processor is plugged in to the application bus (Block 200). The act of phi^g in the 
processor causes a hardware reset (Block 210) of the application processor (at the electrical 
levd). This hardware reset is preferably initiated as in the prior art, and dears the application 
processor's memory, sets all hardware components (such as I/O ports, interrupt controll^s, 
timers, and direct memory access controllers) to a known initial state, and causes the application 
proc^sofs CPU to start executing a predetermined instruction stream at a particular memory 
location. (This particular memory location is preferably an address within the application 
processor's ROM, or other oii-board memory or storage.) The hardware reset is necessary so 
that the application proc^sor win be in a known state, so that the security core can voudi for its 
state ther^fter (fi:>r the interval over wUch the application processor remains continuously 
phigged in to the application bus). Among the initial instructions executed, accordmg to the 
present invention, will be those required to p^orm a security handshake (Block 220) between the 
security core and the ^plication processor. This security handshake is preferably an SSL-like 
handshake, and its purpose is mutual authentication between the two cormecting devices. In 
preferred embodim«its of the presCTt invention, the security handshake is performed usmg the 
teadiings of commonly-assigned U. S. Patent H3SMt^ (serial number 09/435,417), whidi is 
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